§1681n. Civil liability for willful noncompliance

(a) In general

Any person who willfully fails to comply with any requirement imposed under this subchapter with respect to any consumer is liable to that consumer in an amount equal to the sum of-

(1)(A) any actual damages sustained by the consumer as a result of the failure or damages of not less than $100 and not more than $1,000; or

(B) in the case of liability of a natural person for obtaining a consumer report under false pretenses or knowingly without a permissible purpose, actual damages sustained by the consumer as a result of the failure or $1,000, whichever is greater;

(2) such amount of punitive damages as the court may allow; and

(3) in the case of any successful action to enforce any liability under this section, the costs of the action together with reasonable attorney's fees as determined by the court.

(b) Civil liability for knowing noncompliance

Any person who obtains a consumer report from a consumer reporting agency under false pretenses or knowingly without a permissible purpose shall be liable to the consumer reporting agency for actual damages sustained by the consumer reporting agency or $1,000, whichever is greater.

(c) Attorney's fees

Upon a finding by the court that an unsuccessful pleading, motion, or other paper filed in connection with an action under this section was filed in bad faith or for purposes of harassment, the court shall award to the prevailing party attorney's fees reasonable in relation to the work expended in responding to the pleading, motion, or other paper.

(d) Clarification of willful noncompliance

For the purposes of this section, any person who printed an expiration date on any receipt provided to a consumer cardholder at a point of sale or transaction between December 4, 2004, and June 3, 2008, but otherwise complied with the requirements of section 1681c(g) of this title for such receipt shall not be in willful noncompliance with section 1681c(g) of this title by reason of printing such expiration date on the receipt.

Effective Date of 1996 Amendment

Amendment by Pub. L. 104–208 effective 365 days after Sept. 30, 1996, with special rule for early compliance, see section 2420 of Pub. L. 104–208, set out as a note under section 1681a of this title.

Effective Date

Section effective upon the expiration of one hundred and eighty days following Oct. 26, 1970, see section 504(d) of Pub. L. 90–321, as added by Pub. L. 91–508, set out as a note under section 1681 of this title.

Construction

Pub. L. 108–159, title III, §312(f), Dec. 4, 2003, 117 Stat. 1993, provided that: "Nothing in this section, the amendments made by this section, or any other provision of this Act [see Short Title of 2003 Amendment note set out under section 1601 of this title] shall be construed to affect any liability under section 616 or 617 of the Fair Credit Reporting Act (15 U.S.C. 1681n, 1681o) that existed on the day before the date of enactment of this Act [Dec. 4, 2003]."

Statement of Findings and Purpose for 2008 Amendment

"(1) The Fair and Accurate Credit Transactions Act [of 2003] (commonly referred to as 'FACTA') [Pub. L. 108–159, see Short Title of 2003 Amendment note set out under section 1601 of this title] was enacted into law in 2003 and 1 of the purposes of such Act is to prevent criminals from obtaining access to consumers' private financial and credit information in order to reduce identity theft and credit card fraud.

"(2) As part of that law, the Congress enacted a requirement, through an amendment to the Fair Credit Reporting Act [15 U.S.C. 1681 et seq.], that no person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the card holder at the point of the sale or transaction.

"(3) Many merchants understood that this requirement would be satisfied by truncating the account number down to the last 5 digits based in part on the language of the provision as well as the publicity in the aftermath of the passage of the law.

"(4) Almost immediately after the deadline for compliance passed, hundreds of lawsuits were filed alleging that the failure to remove the expiration date was a willful violation of the Fair Credit Reporting Act even where the account number was properly truncated.

"(5) None of these lawsuits contained an allegation of harm to any consumer's identity.

"(6) Experts in the field agree that proper truncation of the card number, by itself as required by the amendment made by the Fair and Accurate Credit Transactions Act [of 2003], regardless of the inclusion of the expiration date, prevents a potential fraudster from perpetrating identity theft or credit card fraud.

"(7) Despite repeatedly being denied class certification, the continued appealing and filing of these lawsuits represents a significant burden on the hundreds of companies that have been sued and could well raise prices to consumers without corresponding consumer protection benefit.

"(b) Purpose.-The purpose of this Act [amending this section and enacting provisions set out as notes under this section and section 1601 of this title] is to ensure that consumers suffering from any actual harm to their credit or identity are protected while simultaneously limiting abusive lawsuits that do not protect consumers but only result in increased cost to business and potentially increased prices to consumers."

Retroactive Effect of 2008 Amendment

Pub. L. 110–241, §3(b), June 3, 2008, 122 Stat. 1566, provided that: "The amendment made by subsection (a) [amending this section] shall apply to any action, other than an action which has become final, that is brought for a violation of [section] 605(g) of the Fair Credit Reporting Act [15 U.S.C. 1681c(g)] to which such amendment applies without regard to whether such action is brought before or after the date of the enactment of this Act [June 3, 2008]."